Ofcom data stolen in MOVEit cyber attack

&#13

Uk communications regulator Ofcom has unveiled it is among the the organisations to have been compromised by the Russian-speaking Clop cyber crime gang following its exploit of a SQL injection vulnerability in Progress Software’s MOVEit Transfer managed file transfer provider.

Ofcom verified earlier now that a “limited amount” of data about businesses it regulates – some of it private – together with the private details of 412 of its have staff, was downloaded in the attack.

“The stability of commercially confidential and delicate particular information furnished to Ofcom is taken particularly severely,” an Ofcom spokesperson reported.

“We took fast motion to reduce further use of the MOVEit services and to put into practice the recommended security measures. We also quickly alerted all impacted Ofcom-regulated corporations, and we go on to give guidance and support to our colleagues.

“No Ofcom units ended up compromised in the course of the attack,” they extra.

NordVPN main know-how officer Marijus Briedis commented: “Stealing personalized and enterprise data from underneath the nose of the UK’s media regulator will be another feather in the cap of the cyber criminals at the rear of the MOVEit hack.

“The large scale of the assault and high-profile victims like the BBC, British Airways and now Ofcom implies this was meticulously planned….

“Stealing individual and company info from under the nose of the UK’s media regulator will be one more feather in the cap of the cyber criminals driving the MOVEit hack”

Briedis included: “This significant info heist will increase the attackers’ profile in just the aggressive ransomware-for-seek the services of marketplace that exists on the dim internet. It also displays the ongoing possibility of provide chain attacks on the United kingdom, with opportunistic hackers seeking to prey on 3rd-bash solutions as a path to landing a big fish even further down the line.”

As the clock ticks nearer to Clop’s deadline for victims to speak to it – lest they locate their details leaked on line – particulars of a lot more victims go on to emerge.

Ireland’s Wellness Service Govt (HSE) – beforehand the target of a main ransomware attack by the Conti cyber crime syndicate – is among all those to have disclosed a breach pursuing the attack.

Like a selection of other victims, the HSE was compromised in a so-termed offer chain assault by using the units of an exterior service supplier that used MOVEit Transfer, in this case specialist providers company EY.

Progress Software’s woes proceed

Prior to the weekend, Development Program, the corporation powering MOVEit, disclosed one more vulnerability in the solution, uncovered with the assistance of 3rd-bash scientists, which may have a comparable impact.

A patch for this vulnerability was introduced on 9 June. MOVEit Transfer consumers can discover extra particulars about the vulnerability below.